Hi all,
We had a productive session with operators at the summit [1]. I
wanted to be sure to go over the notes while they were fresh in my
mind. Some of the issues still need some discussion...
Probably the most contentious issue was that of creating HA routers
when there aren't enough agents to satisfy the minimum agents
requirement of HA [7]. We need to drive this discussion. There were
some very convincing but conflicting points of view expressed in the
session. I have expressed my point of view in the bug report.
There was a complaint that l3-agent-router-remove doesn't work if
there are only 2 l3 agents on the network. Assaf thinks this was
fixed in Liberty. Please file a bug if this is still a problem.
A request was made that for upgrading, it would be nice if there was a
tool that took a flat config file and moved the deprecated options to
their new homes. Last upgrade we did was entirely automatable. I did
not see if an RFE bug was filed to address this in the upgrades team.
We had a discussion about IP protocol numbers in security groups. We
think that any IP protocol number can be specified in the API but that
is not well-documented in the API docs [9]. We need a documentation
bug filed. Support for additional protocol names has been added to
the client [10].
There was discussion around routers and multiple mechanism drivers
[12]. My memory about this discussion is already fading. Can anyone
fill in?
Some of the issues are gaining traction and have owners since the session...
- Dougwig will explore using nginx as metadata proxy [2]
- Kevin Benton is working on scalability of security groups changes [3].
- However, the work can't be backported so we may still need to
find some for stable branches.
- Several operators expressed interest in north / south DVR for IPv6
tenant networks.
- We now have an RFE [11] to push.
Some issues were resolved in near real time during the session but
might still need final approval... Great job!
- Cleaning up stale flows needs a +A to stable/liberty [4]
- A new Neutron Mitaka release [5] with this fix [6] is in the works.
- Consume service plugins queues in RPC workers was merged [8].
If there is something that I missed, please let me know.
Carl Baldwin
[1] https://www.openstack.org/summit/austin-2016/summit-schedule/events/9103
[2] https://bugs.launchpad.net/neutron/+bug/1524916
[3] https://bugs.launchpad.net/neutron/+bug/1576425
[4] https://review.openstack.org/#/c/300424/
[5] https://review.openstack.org/#/c/310931/
[6] https://git.openstack.org/cgit/openstack/neutron/commit/?id=90b9cd334b1b33df933bf1b61b38c6e087c431af
[7] https://bugs.launchpad.net/neutron/+bug/1555042
[8] https://review.openstack.org/#/c/238745/
[9] http://developer.openstack.org/api-ref-networking-v2-ext.html#security_groups
[10] https://review.openstack.org/#/c/307908/
[11] https://bugs.launchpad.net/neutron/+bug/1577488
[12] https://bugs.launchpad.net/neutron/+bug/1555384